CVE-2026-67100

9.8 Critique

Publiée le 18/09/2026 à 10:17 · Modifiée le 08/10/2026 à 22:37 · Analysée par le NVD · Source : psirt@hcl.com

Description

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to full personal profile data and PII across different organizations.

Traduire en français

Produits concernés

HCL Software HCL BigFix Service Management
Hcltech bigfix service management

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	psirt@hcl.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-89
CWE-200

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories